Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6.Check if you run itEPSS 0.33%Dec 9, 2025
- Critical10.0A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6.Check if you run itEPSS 1.07%Dec 9, 2025
- High8.6A vulnerability exists in the SecOps SOAR server.Check if you run itEPSS 0.33%Dec 9, 2025
- High7.1The Custom Admin Menu WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whiCheck if you run itEPSS 0.23%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avs_dai_fe_shutdown() handles the shutdown proceCheck if you run itEPSS 0.18%Dec 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via the configfs inteCheck if you run itEPSS 0.65%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race sys_get_robust_list() and compat_get_robust_list() use ptraceCheck if you run itEPSS 0.23%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.Check if you run itEPSS 0.22%Dec 9, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmac_rx function would previously set skb->ip_sumCheck if you run itEPSS 0.48%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mmap write lock is taken while draining retry fault, mmap write lCheck if you run itEPSS 0.22%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Shutdown FW DMA in bnxt_shutdown() The netif_close() call in bnxt_shutdown() only stops packet DMA.Check if you run itEPSS 0.22%Dec 9, 2025
- Medium5.5Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.Check if you run itEPSS 0.42%Dec 9, 2025
- High8.4Wasmi is a WebAssembly interpreter focused on constrained and embedded systems.Check if you run itEPSS 0.15%Dec 9, 2025
- Medium6.0xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.24%Dec 9, 2025
- Critical9.1Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution.Check if you run itEPSS 9.48%Dec 9, 2025
- Medium6.5Due to an Information Disclosure vulnerability in Application Server ABAP, an authenticated attacker could read unmasked values displayed in ABAP Lists.Check if you run itEPSS 0.33%Dec 9, 2025
- Medium5.4SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error messagCheck if you run itEPSS 0.32%Dec 9, 2025
- Medium5.5Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report.Check if you run itEPSS 0.31%Dec 9, 2025
- Critical9.9Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.Check if you run itEPSS 4.50%Dec 9, 2025
- High8.2SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerabilCheck if you run itEPSS 0.54%Dec 9, 2025
- High7.1Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud (Financials General Ledger), an authenticated attacker with authorization limited to a single compaCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.6The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, vCheck if you run itEPSS 0.34%Dec 9, 2025
- High7.9SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input valiCheck if you run itEPSS 0.47%Dec 9, 2025
- Medium5.9SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities.Check if you run itEPSS 0.38%Dec 9, 2025
Sort